Previous Topic: Viewing the Status of Cache Refresh RequestsNext Topic: Configuring Custom Locales


Configuring Attribute Encryption

By default, AuthMinder stores the user-related data in plain format in the database tables that you seed during installation. To encrypt this data, you use the Attribute Encryption Set Configuration page and select the user attributes that you want to encrypt. See "Multi-Byte Characters and Encrypted Parameters" for the list of attributes that can be stored in an encrypted format.

To store the user attributes in the encrypted format:

  1. Ensure that you are logged in as the MA.
  2. Activate the Services and Server Configurations tab.
  3. Click the Administration Console option on the submenu of the tab.

    Under the System Configuration section on the side-bar menu, click the Attribute Encryption Configuration link to display the page.

    Note: If you choose to encrypt the User Identifier attribute, all the following attributes that help in uniquely identifying the user are also encrypted:

  4. In the Select Attribute(s) for Encryption section, select the attributes that you want to encrypt from the Available Attributes for encryption list to the Attributes Selected for encryption list.

    Click the > button to move selected attributes to the desired list. You can also click the >> button to move all attributes to the desired lists.

    Note: Hold the Ctrl key to select more than one attribute at a time.

    The Attributes Selected for encryption list displays all the attributes that will be stored in an encrypted format.

  5. In the Data Masking Configuration section, specify the parameters that are described in the following table:

Parameter

Description

Type

Select an option from the drop-down list to Mask or Unmask the attributes configured for encryption.

Start Length

The number of characters to be masked or unmasked from the start of the actual data string.

End Length

The number of characters to be masked or unmasked from the end of the actual data string.

Masking Character

The character that will be used to mask (hide) the actual data.

For example, if you want to mask a user name that has been configured for encryption, and the Start Length, End Length, and Masking Character are 2, 2, and x, then the user name "mparker" is masked as "xxarkxx", and vice-versa for unmasking.

  1. Click Save to save the changes that you have made.
  2. Refresh all deployed AuthMinder Server instances. See "Refreshing the Cache" for instructions on how to refresh the system cache.